EUVD-2026-48605
GHSA-3v3c-5gj3-fqxv
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Network reachable with low complexity; requires low privileges and no user interaction, only confidentiality impact.
Primary rating from Vendor (DEVOLUTIONS).
CVSS VectorVendor: DEVOLUTIONS
Lifecycle Timeline
4DescriptionCVE.org
Insertion of sensitive information into sent data in the automation jobs API in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with scoped job or script read permission to obtain another user's stored OAuth refresh token via job read responses that fail to strip the refresh token.
AnalysisAI
OAuth refresh token disclosure in Devolutions PowerShell Universal 2026.2.2 and earlier allows authenticated users with scoped job or script read permission to extract other users' stored refresh tokens from job read API responses. The automation jobs API fails to strip the token before sending it to the client. No active exploitation is reported; EPSS score is low at 0.22%.
Technical ContextAI
PowerShell Universal is a web-based PowerShell administration and automation platform. The vulnerability exists in the automation jobs API, rooted in CWE-201: Insertion of Sensitive Information Into Sent Data. The API returns OAuth refresh tokens in job read responses, exposing credentials that should be sanitized. Affected products match CPE cpe:2.3:a:devolutions:powershell_universal:*:*:*:*:*:*:*:* covering versions through 2026.2.2.
RemediationAI
Upgrade to Devolutions PowerShell Universal version 2026.2.3 or higher, which properly strips refresh tokens from job read responses. No workarounds are described. If immediate patching is not feasible, restrict script and job read permissions to only trusted users to reduce exposure, but this does not eliminate the vulnerability within authorized users; only the patch fully resolves the leak.
More in Powershell Universal
View allThe API endpoints in Ironman PowerShell Universal 3.0.0 through 4.2.0 allow remote attackers to execute arbitrary comman
Authenticated users with variable write permission on Devolutions PowerShell Universal 2026.2.2 and earlier can execute
Code injection in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with schedule creat
Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with
PowerShell Universal before version 2026.1.4 contains insufficient authorization validation on gRPC endpoints, allowing
The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the conf
Devolutions PowerShell Universal 2026.2.0 leaks serialized App Tokens in plaintext within AI Agent job API responses, en
Information disclosure in Devolutions PowerShell Universal 2026.2.2 and earlier allows a local attacker with file system
authentication configuration in PowerShell Universal versions up to 2026.1.3 is affected by cleartext storage of sensit
PowerShell Universal versions before 4.5.6 and 5.6.13 contain a stored cross-site scripting vulnerability that allows un
PowerShell Universal versions before 2026.1.4 contain an improper input validation vulnerability in the apps and endpoin
Unauthenticated remote access to user-defined REST endpoint OpenAPI specifications is possible in Devolutions PowerShell
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today